A high performance web server and reverse proxy server
dc79564477
service (CVE-2026-9256) Resolves: RHEL-182551 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack Resolves: RHEL-188407 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) |
||
|---|---|---|
| .gitignore | ||
| 50x.html | ||
| 404.html | ||
| 0001-remove-Werror-in-upstream-build-scripts.patch | ||
| 0002-fix-PIDFile-handling.patch | ||
| 0003-Support-loading-cert-hardware-token-PKC.patch | ||
| 0004-Set-proper-compiler-optimalization-level-O2-for-perl.patch | ||
| 0005-Init-openssl-engine-properly.patch | ||
| 0006-Fix-ALPACA-security-issue.patch | ||
| 0007-Enable-TLSv1.3-by-default.patch | ||
| 0008-CVE-2023-44487-HTTP-2-per-iteration-stream-handling.patch | ||
| 0009-defer-ENGINE_finish-calls-to-a-cleanup.patch | ||
| 0010-Optimized-chain-link-usage.patch | ||
| 0011-SSL-use-of-the-SSL_OP_IGNORE_UNEXPECTED_EOF-option.patch | ||
| 0012-CVE-2022-41741-and-CVE-2022-41742-fix.patch | ||
| 0013-CVE-2024-7347-Buffer-overread-in-the-mp4-module.patch | ||
| 0014-Clarify-binding-behavior-of-t-option.patch | ||
| 0015-Upstream-detect-premature-plain-text-response-from-S.patch | ||
| 0016-Dav-destination-length-validation-for-COPY-and-MOVE.patch | ||
| 0017-Mp4-fixed-possible-integer-overflow-on-32-bit-platfo.patch | ||
| 0018-Mail-fixed-clearing-s-passwd-in-auth-http-requests.patch | ||
| 0019-Mp4-avoid-zero-size-buffers-in-output.patch | ||
| 0020-Rewrite-fixed-escaping-and-possible-buffer-overrun.patch | ||
| 0021-Rewrite-fix-buffer-overflow-with-overlapping-capture.patch | ||
| 0022-HTTP-2-per-iteration-stream-handling-limit.patch | ||
| 0023-Upstream-limit-header-length-for-HTTP-2-and-gRPC.patch | ||
| gating.yaml | ||
| macros.nginxmods.in | ||
| maxim.key | ||
| mdounin.key | ||
| nginx-1.20.1-CVE-2025-23419.patch | ||
| nginx-logo.png | ||
| nginx-upgrade | ||
| nginx-upgrade.8 | ||
| nginx.conf | ||
| nginx.logrotate | ||
| nginx.service | ||
| nginx.spec | ||
| nginx.sysusers | ||
| nginx.tmpfiles | ||
| nginxmods.attr | ||
| README.dynamic | ||
| sb.key | ||
| sources | ||
| UPGRADE-NOTES-1.6-to-1.10 | ||
###############
Dynamic modules
###############
Dynamic modules are loaded using the "load_modules" directive. The RPM package
for each module has a '.conf' file in the /usr/share/nginx/modules directory.
The '.conf' file contains a single "load_modules" directive.
This means that whenever a new dynamic module is installed, it will
automatically be enabled and Nginx will be reloaded.
--------------------------------------------------------
Prevent dynamic modules from being enabled automatically
--------------------------------------------------------
You may want to avoid dynamic modules being enabled automatically. Simply
remove this line from the top of /etc/nginx/nginx.conf:
include /usr/lib64/nginx/modules/*.conf;